[Rspamd-Users] Whitelist overrides - help please?

Mon Jul 20 15:29:08 UTC 2020

On 2020-07-20 11:02, Nihad @ RSPAMD maillist via Users wrote:
> You will have to either explain what symbols are triggering rejections or supply the list of symbols and scores for at lease one message.

Here's the history entry for the most recent bounce:

010001736cce3436-2a63d4da-5ebb-4f69-b6f2-a76a81f5d85a-000000 at email.amazonses.com
209.85.167.50	reject
	18.39 / 15	45.2k	8.426748	7/20/2020, 11:18:53 AM	
Symbols	ARC_REJECT, BAYES_SPAM, DKIM_TRACE, DMARC_POLICY_REJEC,
HAS_REPLYTO, MIME_BASE64_TEXT, MIME_MA_MISSING_TEXT, R_DKIM_REJECT,
R_SPF_ALLOW, RBL_SENDERSCORE_FAIL, RBL_VIRUSFREE_UNKNOWN_FAIL,
RCVD_COUNT_THREE, REPLYTO_DN_EQ_FROM_DN, TO_DN_NONE, URI_COUNT_ODD

And here's the bounced rejection in gmail:

h3mr10913771ljg.191.1595258342397;
        Mon, 20 Jul 2020 08:19:02 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1595258342; cv=none;
        d=google.com; s=arc-20160816;
        b=dyaNab7OVXHw/sVr8DuyBiweX1ya5rM12t79aLeVRjO94YoNI8lH23Bw7SDmEuQn23

48E8rXGKpoCRKKiKIiIZ83AOJBCcM8roIJoaw2b3n/86TQ58jMVMh6VUxmUNgIhu9rb1

PVuvZEO78cU+93Qi82flW4L7u44cySyK2hktUmw/nq1zBGd05y3d36osUfRLVci0dgp5

uE9YISm3uTgBVCaXnPrUUXrVuIREOqaWxMeCrbu+zwAGNaj8vMh1lex4HLWtMZnTceRN

qSZZeuCEvzxqX8NGLzdM01Cq9bp9AzXiQzg/5huK4axWT0kCTz5DxCfsNXv2YtBooMNT
         T8Xg==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed;
d=google.com; s=arc-20160816;
        h=in-reply-to:references:subject:from:date:message-id:auto-submitted
         :to:dkim-signature;
        bh=F1x9FDpxYNwboeqZhSvykf8GG/f37MaqkJaCQ7J/Sm4=;
        b=vGCkre7EjvwEYJZDR1X7PtrGEyHa0h/ImOFiK/nXwBYBOBC5IZRGnMj/6iOIGdoyIC

obMJTkxEjKowAVOF3MDOQH/c80hepTD768Um7A6pSIJTvODDEM5NjMDduWfLvahSCtnS

5j8g+yV7PbmDTWbW+ngZxhn6k8/tKkYkfQk6QPrhG7BhPzY5nNvUVYrkCBeqktOu7rzJ

95IuYmd66rcSVm+vJwIJ4OCKhU7CCBF+3Xua4a8n2VQR3kDVHo4XY2rfDNqChAmoJlRE

gwexcBe9Vh9IMCkXqNp4rac6r+YRRKc3iE4aN9ewiXYLEBEozA9wybBHwPzK2+BlUCNr
         WJQQ==
ARC-Authentication-Results: i=1; mx.google.com;
       dkim=pass header.i=@googlemail.com header.s=20161025
header.b=SO8xiteI;
       spf=pass (google.com: best guess record for domain of
postmaster at mail-sor-f69.google.com designates 209.85.220.69 as permitted
sender) smtp.helo=mail-sor-f69.google.com;
       dmarc=pass (p=QUARANTINE sp=QUARANTINE dis=NONE)
header.from=googlemail.com
Return-Path: <>
Received: from mail-sor-f69.google.com (mail-sor-f69.google.com.
[209.85.220.69])
        by mx.google.com with SMTPS id
b4sor2134287lfo.31.2020.07.20.08.19.02
        for <alareikhs.gothemund+caf_=phils=caerllewys.net at gmail.com>
        (Google Transport Security);
        Mon, 20 Jul 2020 08:19:02 -0700 (PDT)
Received-SPF: pass (google.com: best guess record for domain of
postmaster at mail-sor-f69.google.com designates 209.85.220.69 as permitted
sender) client-ip=209.85.220.69;
Authentication-Results: mx.google.com;
       dkim=pass header.i=@googlemail.com header.s=20161025
header.b=SO8xiteI;
       spf=pass (google.com: best guess record for domain of
postmaster at mail-sor-f69.google.com designates 209.85.220.69 as permitted
sender) smtp.helo=mail-sor-f69.google.com;
       dmarc=pass (p=QUARANTINE sp=QUARANTINE dis=NONE)
header.from=googlemail.com
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=googlemail.com; s=20161025;
        h=to:auto-submitted:message-id:date:from:subject:references
         :in-reply-to;
        bh=F1x9FDpxYNwboeqZhSvykf8GG/f37MaqkJaCQ7J/Sm4=;
        b=SO8xiteIShRz3UnfK6PP49+qZ//IE4VLw3mVX0fxwmTJsS/3QcWeDxYsN6nDjfyKo5

XSFIllPYmSAW+XwbIskVOVc9ETTuMlWvwVowfBVMQmLFAjw3r1wxdp6BIRuQHHQoXK92

+lq8GVuQSxOAqVckxJCIDQfc4ftgaagVx4MnMGTZu7npJ7bf8ZfTK2RLXgp7OrOWZj84

wAbp1v2k3phEo0E2OlQ9f4dUDxxJTTxKMyJV8c4y2tnaQ/ubsbzo39vkafQVXpYjh0Nq

U19vQFYwKGcqWD67spLlF5QGtJFEF16F8b5Kna/19WYffhuiD2sfHtA3H9CncCzoSrf/
         1PUw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=1e100.net; s=20161025;
        h=x-gm-message-state:to:auto-submitted:message-id:date:from:subject
         :references:in-reply-to;
        bh=F1x9FDpxYNwboeqZhSvykf8GG/f37MaqkJaCQ7J/Sm4=;
        b=M4Wqp5COZx/o8QibjRlWjrKnVIR3OdKKib5uBA0G08sLuyhnS8Go9CeFsRpMQoHr0K

cI5Mhyhc39b4XXgmqAm2/5TTq7HsMyJ6/OtIJ8JqegvjsskO6pCzC0GuvinfkRYiB2k6

E5DXY+BKG7whFBaL3n8PaGCF1eFQpcM5M/jDy4aMfhinLGewAcWK2jTpn644lMrWDXKy

ILXZmG+LnkEYuGx3b6LSnS2+S4ztajqzPeO5z5k707yCd0YLC9OOA+HlzDaZ/cRN51Sy

Y0Ussn3kOWAbJc/xC5bfmgG5I9qXRvWe3Bm6MrwXiRYTvZizJnOAtBFt21fimtoe5A/4
         JJTA==
X-Gm-Message-State:
AOAM532Bbmc4Kt2VnfWXFUP7eEDTEH8kGm35naUX7i6tS4x9MmCjFBPa
lcKKX2E9b+jc4vH/iN2ahFghqtpiT6r0VIhQabXxRg==
X-Google-Smtp-Source:
ABdhPJxsCh5IPhzSeBVCmVyvz1cwDL/mjjYSq+WXaFfyYy+JKCYiEWktX89rBSz26nVwvRqGbIJWRhytB0nX/Tf7E0tSqSEME2JTY90=
X-Received: by 2002:a19:228a:: with SMTP id
i132mr9880629lfi.178.1595258342260;
        Mon, 20 Jul 2020 08:19:02 -0700 (PDT)
Content-Type: multipart/report; boundary="000000000000d0b7fc05aae106d9";
report-type=delivery-status
To: alareikhs.gothemund+caf_=phils=caerllewys.net at gmail.com
Received: by 2002:a19:228a:: with SMTP id i132mr6341949lfi.178; Mon, 20
Jul 2020 08:19:02 -0700 (PDT)
Return-Path: <>
Auto-Submitted: auto-replied
Message-ID: <5f15b5e6.1c69fb81.cfe8.128a.GMR at mx.google.com>
Date: Mon, 20 Jul 2020 08:19:02 -0700 (PDT)
From: Mail Delivery Subsystem <mailer-daemon at googlemail.com>
Subject: Delivery Status Notification (Failure)
References:
<010001736cce3436-2a63d4da-5ebb-4f69-b6f2-a76a81f5d85a-000000 at email.amazonses.com>
In-Reply-To:
<010001736cce3436-2a63d4da-5ebb-4f69-b6f2-a76a81f5d85a-000000 at email.amazonses.com>
X-Failed-Recipients: phils at caerllewys.net

--000000000000d0b7fc05aae106d9
Content-Type: multipart/related; boundary="000000000000d0bd5405aae106df"

--000000000000d0bd5405aae106df
Content-Type: multipart/alternative; boundary="000000000000d0bd5905aae106e0"

--000000000000d0bd5905aae106e0
Content-Type: text/plain; charset="UTF-8"

** Message not delivered **

There was a problem delivering your message to phils at caerllewys.net. See
the technical details below, or try resending in a few minutes.

The response from the remote server was:
554 5.7.1 Spam message rejected

--000000000000d0bd5905aae106e0
Content-Type: text/html; charset="UTF-8"

<html>
<head>
<style>
* {
font-family:Roboto, "Helvetica Neue", Helvetica, Arial, sans-serif;
}
</style>
</head>
<body>
<table cellpadding="0" cellspacing="0" class="email-wrapper"
style="padding-top:32px;background-color:#ffffff;"><tbody>
<tr><td>
<table cellpadding=0 cellspacing=0><tbody>
<tr><td style="max-width:560px;padding:24px 24px
32px;background-color:#fafafa;border:1px solid #e0e0e0;border-radius:2px">
<img style="padding:0 24px 16px 0;float:left" width=72 height=72
alt="Error Icon" src="cid:icon.png">
<table style="min-width:272px;padding-top:8px"><tbody>
<tr><td><h2 style="font-size:20px;color:#212121;font-weight:bold;margin:0">
Message not delivered
</h2></td></tr>
<tr><td
style="padding-top:20px;color:#757575;font-size:16px;font-weight:normal;text-align:left">
There was a problem delivering your message to <a
style='color:#212121;text-decoration:none'><b>phils at caerllewys.net</b></a>.
See the technical details below, or try resending in a few minutes.
</td></tr>
</tbody></table>
</td></tr>
</tbody></table>
</td></tr>
<tr style="border:none;background-color:#fff;font-size:12.8px;width:90%">
<td align="left" style="padding:48px 10px">
The response from the remote server was:<br/>
<p style="font-family:monospace">
554 5.7.1 Spam message rejected
</p>
</td>
</tr>
</tbody></table>
</body>
</html>

--000000000000d0bd5905aae106e0--
--000000000000d0bd5405aae106df
Content-Type: image/png; name="icon.png"
Content-Disposition: attachment; filename="icon.png"
Content-Transfer-Encoding: base64
Content-ID: <icon.png>

--000000000000d0bd5405aae106df--
--000000000000d0b7fc05aae106d9
Content-Type: message/delivery-status

--000000000000d0b7fc05aae106d9
Content-Type: message/global
Content-Transfer-Encoding: quoted-printable

--000000000000d0b7fc05aae106d9--

-- 
  Phil Stracchino
  Babylon Communications
  phils at caerllewys.net
  phil at co.ordinate.org
  Landline: +1.603.293.8485
  Mobile:   +1.603.998.6958